Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-92375

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 0 to < 15.83affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected
  • 14.7.0 (Windows) to < 14.7.48868 (Windows)affected
  • 14.7.0 (Linux) to < 14.7.48868 (Linux)affected
  • 14.7.0 (macOS) to < 14.7.48868 (macOS)affected
  • 13.2.0 (Windows) to < 13.2.36231 (Windows)affected
  • 13.2.0 (Linux) to < 13.2.154008 (Linux)affected
  • 13.2.0 (macOS) to < 13.2.154007 (macOS)affected

TeamViewer Host

Default version status: unaffected

  • 0 to < 15.83affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected
  • 14.7.0 (Windows) to < 14.7.48868 (Windows)affected
  • 14.7.0 (Linux) to < 14.7.48868 (Linux)affected
  • 14.7.0 (macOS) to < 14.7.48868 (macOS)affected
  • 13.2.0 (Windows) to < 13.2.36231 (Windows)affected
  • 13.2.0 (Linux) to < 13.2.154008 (Linux)affected
  • 13.2.0 (macOS) to < 13.2.154007 (macOS)affected

TeamViewer Remote Management - Monitoring

Default version status: unaffected

  • 0 to < 26.10.1affected

References